Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7ygkzBBshRW97Ils8_PUtgRTfps.roa
File:                     7ygkzBBshRW97Ils8_PUtgRTfps.roa (raw, json)
Hash identifier:          Dd0DvLVLpUc0tOUXSjfvfnNkjoAugptOpjRknfAiT1Q=
Subject key identifier:   EF:28:24:CC:10:6C:85:15:BD:EC:89:6C:F3:F3:D4:B6:04:53:7E:9B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01E4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7ygkzBBshRW97Ils8_PUtgRTfps.roa
Signing time:             Mon 01 May 2023 01:33:44 +0000
ROA not before:           Mon 01 May 2023 01:33:44 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        211.134.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:44 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=EF2824CC106C8515BDEC896CF3F3D4B604537E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:48:28:84:f8:e0:24:68:39:78:c8:e5:ac:
                    51:ed:a8:77:88:ea:b0:81:c9:2b:80:ff:98:b4:31:
                    8e:b1:a7:94:9c:26:a9:96:21:b0:e3:35:15:96:04:
                    22:3e:97:64:f5:7c:45:16:a6:9c:91:3c:3b:30:d3:
                    5f:e5:67:d2:14:ec:a3:85:d5:91:c1:2f:6b:f9:37:
                    ab:78:d0:22:0d:e1:6d:03:04:c5:ea:31:5e:85:2d:
                    54:c6:b2:c7:e8:38:a1:39:c6:9c:10:59:85:a9:bf:
                    ad:23:66:1a:d6:3a:45:e6:9e:b8:a2:d4:d3:ac:3f:
                    3b:3f:0c:d9:68:e3:3a:38:3a:04:a9:65:a2:f3:60:
                    80:aa:4f:2a:fd:d9:d2:a0:f5:7d:e5:1b:2f:eb:5b:
                    a9:b9:92:bc:13:43:9d:d2:c4:06:60:bb:74:6d:d9:
                    c5:5d:f6:44:38:eb:f3:02:38:63:9b:a5:95:36:fe:
                    7c:d6:a8:80:ef:0b:ca:21:f7:db:7b:c4:16:16:7c:
                    04:27:e8:2a:9f:e4:16:07:c6:50:20:12:26:6f:2a:
                    ce:64:be:d7:e4:9c:36:ba:9c:9c:ca:6d:ea:ba:70:
                    29:db:30:b6:8d:14:0b:9c:8a:ea:d1:85:5e:09:da:
                    6c:5a:ed:4f:79:d4:6a:5e:9e:ec:40:13:2a:19:98:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:28:24:CC:10:6C:85:15:BD:EC:89:6C:F3:F3:D4:B6:04:53:7E:9B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7ygkzBBshRW97Ils8_PUtgRTfps.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:b9:53:58:c6:d3:5e:4a:89:d9:93:51:7c:55:75:14:72:f0:
         b7:ca:a7:f3:55:3a:66:15:d0:80:07:29:d8:47:bd:97:ae:ad:
         45:70:cd:4f:c9:75:9c:34:eb:eb:04:d5:ea:30:cf:3b:05:63:
         48:ca:93:4a:bc:b6:22:c4:a2:59:ca:3b:4e:5b:de:d6:33:9a:
         21:cb:ac:9b:a1:db:3f:90:16:23:58:4e:5e:3e:2a:6a:9d:9f:
         9b:49:e2:ff:9e:5e:97:46:35:e5:47:2e:2c:de:8f:a0:f7:2f:
         76:07:dd:b4:2c:fe:20:52:bf:e3:69:e9:81:ec:9c:dd:63:9f:
         67:d8:30:33:32:a1:e6:7a:0b:09:02:4a:a4:93:c8:ea:93:23:
         bd:c0:70:fe:a4:0f:ac:2a:15:44:db:9d:5f:03:99:73:39:e5:
         0a:8e:1d:79:97:22:23:bb:d1:77:bf:12:90:ee:4d:be:ee:2a:
         11:38:4e:12:97:87:ee:59:46:30:79:95:6d:ef:8f:ba:f4:d1:
         50:a6:55:75:5d:df:f7:ea:67:56:5a:41:e1:d8:4e:f5:e5:44:
         3a:c7:22:e8:37:f6:9e:ed:f2:ea:2a:6d:7f:3b:15:3c:2d:8d:
         40:d1:51:5b:a4:7a:27:ed:0f:14:5d:82:ed:30:b6:e5:6f:39:
         a7:40:60:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org